Lucene search

K
nessusTenable8303.PRM
HistoryJun 17, 2014 - 12:00 a.m.

Flash Player < 14.0.0.125 (inferred) Multiple Vulnerabilities (APSB14-16)

2014-06-1700:00:00
Tenable
www.tenable.com
14

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%

Versions of Adobe Flash Player equal or prior to 13.0.0.214 (or 11.2.202.359 on Linux) are outdated and thus unpatched for the following vulnerabilities :

  • Multiple unspecified errors that could be leveraged for cross-site scripting attacks (CVE-2014-0531, CVE-2014-0532, CVE-2014-0533).
  • Multiple unspecified errors that could permit unspecified security bypass attacks (CVE-2014-0534, CVE-2014-0535).
  • Unspecified memory corruption issue that can be leveraged for arbitrary code execution (CVE-2014-0536).
Binary data 8303.prm
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.071 Low

EPSS

Percentile

94.0%